C:\Documents and Settings\scchan\my documents\visual studio 2010\Projects\test\test\obj\x86\Debug\test.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6db1f972f1e102db1afb2331c7cddc68d3876632d84b0964fa49e3c1e1ff4889.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6db1f972f1e102db1afb2331c7cddc68d3876632d84b0964fa49e3c1e1ff4889.exe
Resource
win10v2004-20240704-en
General
-
Target
6db1f972f1e102db1afb2331c7cddc68d3876632d84b0964fa49e3c1e1ff4889
-
Size
56KB
-
MD5
b590d9375b89cc10021b74af75f33172
-
SHA1
c69ac82194aa2d258a11b3a74328ccbaf69cf322
-
SHA256
6db1f972f1e102db1afb2331c7cddc68d3876632d84b0964fa49e3c1e1ff4889
-
SHA512
9fa304460268a659f3365f46d91d763064afd396a41a98cc93fae9f9a5284f382a29d3689b8251bc929a8343110da37be8b48714d2bc61978c5953d77a764010
-
SSDEEP
1536:ADnpvQBWbt8LUXqQos0UX3q+kgnOpfwiPGMOS:A7lQEWJTUX3q+ypIiPGMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6db1f972f1e102db1afb2331c7cddc68d3876632d84b0964fa49e3c1e1ff4889
Files
-
6db1f972f1e102db1afb2331c7cddc68d3876632d84b0964fa49e3c1e1ff4889.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 159B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ